The protection of personal data is very important to us. We ensure full compliance with Regulation (EU) 679/2016 “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data”.

This personal data protection policy (the “Privacy Policy”) – and the “Terms of Use” explain how we use your personal data:

• when you register to or visit our website www.white-space.gr or
• when you communicate with us or ask us for information.

Registered office

Our Company details are: WHITE SPACE, 35 Michalakopoulou Street, 11528, Athens, Greece, Tel.: +30 210 6717115.

Lawful processing of personal data

In compliance with the provisions of the related EU and national legislation, we manage all Personal Data with which it is provided with the greatest possible care, ensuring, in any case, their protection and confidential nature. To ensure the confidentiality and security of the Personal Data, we have adopted all necessary organizational and technical measures, establishing internal security policies, using suitable electronic means, adequately informing, and training our people.

We shall lawfully process all Personal Data, as we may collect and process such data exclusively for specific, explicit, and legal purposes and only to the extent that such processing is necessary for the fulfilment of such purposes. We ensure that the data kept are accurate and updated, seeking for this purpose the assistance of the data subjects, i.e., of the natural persons whom these data concern, and we shall retain such data for the time necessary for the fulfilment of the specific purposes.

We will use and disclose Personal Data as we believe to be necessary or appropriate:

• To comply with applicable laws
• To comply with legal process
• To respond to requests from public and government authorities
• To enforce our terms and conditions
• To protect our services
• To protect the rights, privacy, safety, or property of our own, or others and
• To allow us to pursue available remedies or limit the damages that we may sustain.

Personal data being processed

We collect personal information entered in the data fields in the corresponding sections of our website and personal information received either because of doing business with you, at some previous event, or from some other transactions you had with us in general. We do not intentionally request sensitive personal information as defined by applicable laws.

You can put your data, in our website, if you want to communicate with us. These requested data are:

• Name
• Surname
• Email
• Company name
• Telephone
• Kind of required service
• Additional info (free text)

Collection of technical information

In addition, and for technical reasons, additional data are collected during a visit to our website, such as:

• IP address (Internet Protocol address) of the computer of access
• our web pages that you visit
• time of visit to the website
• date and time of the visit
• type of browser and browser settings
• operating system
• device
• Geographical Area of the visit
• ISP

Such technical information may, in individual cases, constitute personal data. Generally, however, we use technical details only to the extent necessary for technical reasons, for the operation and protection of our website and its application from attacks and malicious use, as well as in pseudonymous or anonymous form for statistical reasons.

Social plugins (Facebook, Linkedin, Google+ etc)

Our website may include some widely used “social network plugins”.

When you enter our website, Facebook collects, through the plugin, information regarding your visit via your IP address. If you click the “Like” button while you are logged in to your Facebook account, the content of your website that you “liked” shall be linked to your Facebook profile. White Space, in its capacity as administrator of this site, is not made aware of the content of the data transmitted to Facebook or of the way in which Facebook uses such data. For more information, please consult Facebook’s privacy policy at https://www.facebook.com/about/privacy . If you do not want Facebook to link your visit to our website to your Facebook account, log out of your Facebook account.

Similarly, we use plugins of the social networks Linkedin, Google+. Please consult the Privacy Policies of the relevant social networks for detailed information on the way in which your Personal Data are managed by such networks (https://policies.google.com/privacy?hl=en , https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy )

Use of personal data

We collect, process, and use your Personal Data that concern you mainly when you visit our website. On a case-by-case basis, Personal Data are processed in accordance with the applicable legislation and this policy or in conformity with your consent. In certain cases, the data are used only in a pseudonymous or anonymous form.

We store and use all Personal Data that concern you whenever you make contact over the phone, by e-mail or other means of communication. Such personal data will be used exclusively for the purpose of handling your request at any given time and/or to provide you with a service by executing the request that you made, and for the issuance of all necessary documents.

Furthermore, we store and use personal data and technical information to the extent necessary for the prevention and handling of any malicious use or other illegal behavior on our website, e.g., to keep the data secure in case of an attack on our IT systems. Lastly, we store and use your data to the extent that we are legally obliged to do so, e.g., as foreseen by specific provisions of the related legislation or a court judgment or another decision by the Authorities, as well as to safeguard our rights and claims, and to defend our rights before the courts.

Third parties to whom the personal data will be transferred

We may transfer these data to companies with which we collaborate, within the European Union, which will process the data on behalf of us, as data processors, exclusively for the purposes mentioned above. When transferring the data, we shall adopt all necessary measures to ensure the highest possible security level.

We assure that such companies provide all the necessary guarantees for the protection of all Personal Data and that they adopt suitable technical and organizational measures so that the processing is lawful and that the protection of the Personal Data and the rights of the natural persons they concern are safeguarded.

Data security

The security of your personal data is a high priority for the us. We, therefore, protect your data which are stored by us by adopting technical and organizational measures for the efficient prevention of loss or abuse thereof by third parties. Our people who oversee the processing of personal data undertake to keep such data secret. The data you send us via our website are transferred encrypted for the protection of your personal data. To ensure the long-term protection of your data, the technical security measures are monitored regularly and, if necessary, are adjusted to the relevant technological standards.

Cookies policy

The use of cookies is regulated by the related Cookies Policy, while the personal data that are collected by that means enjoy the same protection level as other personal data.

Consent and rights of the subject of the personal data

By choosing to agree with and consent to the processing of the Personal Data that concern you, you grant your consent for the processing of the data for the aforementioned purposes. You may withdraw your consent at any time, as well as exercise one of your legal rights.

Under the Data Protection legislation, you have the following rights with regards to their personal information:

• the right to be informed about the collection and the use of your personal data
• the right to access your personal data and supplementary information
• the right to have inaccurate personal data rectified, or completed if it is incomplete
• the right to erasure (to be forgotten) in certain circumstances
• the right to restrict processing in certain circumstances
• the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services
• the right to object to processing in certain circumstances
• rights in relation to automated decision making and profiling
• the right to withdraw consent at any time (where relevant)
• the right to complain to the relevant Authority.

We will handle your requests with due care, to safeguard the security of your data and the protection of your rights. For this reason, in case of doubts regarding the person who requests the disclosure of Personal Data, we may ask you for additional information that is necessary for your identification.

In case we are unable, due to the large number of requests, to fulfil your request immediately, you will be informed you as soon as possible and in any case within one month from the submission of your request of its progress and of the reason for any delay in its fulfilment. If your requests are clearly unfounded or excessive, in particular because of recurrence, we may either impose a reasonable fee, considering the administrative costs of providing the information or communicating or executing the requested action, or refuse to follow up on your request.

In case of a data breach which may put your rights and freedoms at high risk, if this does not fall under one of the exceptions provided for in the law, we undertake to inform you of the breach without unjustifiable delay.

You may direct all questions or requests regarding the protection of your personal data kept by us to the following e-mail address: info@white-space.gr.
In any case, if you believe that your privacy is violated in any way, you have the right to lodge a complaint with the Hellenic Data Protection Authority, using the following contact details: Website: www.dpa.gr , Postal address: 1-3 Kifisias Ave., 115 23 Athens, Tel: +30 210 6475600, Fax: +30 210 6475628, E-mail: contact@dpa.gr .

Amendments to the information contained in this policy

Any future related regulations that may take effect will form part of this announcement. In any case, WHITE SPACE shall reserve the right to change the terms related to the protection of personal data in accordance with the applicable legal framework.
Therefore, these Personal Data protection terms may be revised and updated at any time without prior notice. The users of the website are invited to observe the examined terms for changes at regular intervals, since the continuous use of the website suggests that they accept all possible modifications thereof.

The current version of the Personal Data Protection Policy entered into force in May 2023.